Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Static and dynamic code analysis, SAST, DAST, and code review tools.

Kitploit recommended

Top tools

10 selected

semgrep

semgrep/semgrep

16.2k1 day ago

codeql

github/codeql

10.3k3h 31m ago

sonarqube

sonarsource/sonarqube

11.1k16h 32m ago

infer

facebook/infer

15.7k1 day ago

ghidra

nationalsecurityagency/ghidra

71.1k19h 37m ago

radare2

radareorg/radare2

24.5k2h 11m ago

capa

mandiant/capa

6.1k9 days ago

bandit

pycqa/bandit

8.2k3 days ago

gosec

securego/gosec

8.9k21h 40m ago

#10

bearer

bearer/bearer

2.7k20h 4m ago

Newest Relevance Most popular Recently updated

2171 results

poc_CVE-2025-68613

reem-012/poc_cve-2025-68613

POC for CVE-2025-68613

vulnerability-analysiscode-analysisexploitation+3

10 months ago

CVE-2023-45612-PoC

ksaweryr/cve-2023-45612-poc

Proof of concept for XXE in Ktor (CVE-2023-45612)

vulnerability-analysiscode-analysisexploitation+2

11 months ago

CVE-2025-12673

d0n601/cve-2025-12673

Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload

payload-generationvulnerability-analysiscode-analysis+3

11 months ago

Exploit-CVE-2025-68613

ali-py3/exploit-cve-2025-68613

Proof-of-concept exploit for a critical RCE vulnerability in n8n (CVE-2025-68613), demonstrating arbitrary command execution via expression injection…

vulnerability-analysiscode-analysisexploitation+3

10 months ago

CVE-2023-38890

tagoletta/cve-2023-38890

Exploit for CVE-2023-38890, an unauthenticated SQL injection to remote code execution in Online Shopping Portal 3.1, with a proof-of-concept and…

vulnerability-analysiscode-analysisexploitation+2

9 months ago

CVE-2026-1657

d3kc4rt1/cve-2026-1657

Unauthenticated Arbitrary File Upload in EventPrime Plugin

vulnerability-analysiscode-analysisexploitation+3

6 months ago

CVE-2025-42944

rxerium/cve-2025-42944

Detection for CVE-2025-42944

vulnerability-scannersvulnerability-analysiscode-analysis+3

11 year ago

https-nj.gov---CVE-2020-11023

snorlyd/https-nj.gov---cve-2020-11023

Vulnearability Report of the New Jersey official site

vulnerability-analysiscode-analysisweb-security+2

14 years ago

CVE-2007-4559

depers-rus/cve-2007-4559

Proof-of-concept demonstrating CVE-2007-4559 path traversal in Python's tarfile module, allowing arbitrary file overwrite via malicious TAR archives.

vulnerability-analysiscode-analysisexploitation+2

11 year ago

CVE-2025-12758

open-flaw/cve-2025-12758

Detailed CVE-2025-12758 disclosure with PoC demonstrating Unicode variation selector bypass in validator.js isLength(), including root cause…

vulnerability-analysiscode-analysisweb-security+2

10 months ago

CVE-2025-55182

andressuarezmonk/cve-2025-55182

Proof-of-concept exploit for CVE-2025-55182, achieving remote code execution in React Server Functions via prototype pollution and crafted Flight…

vulnerability-analysiscode-analysisexploitation+3

10 months ago

rails-cve-2017-17917

matiasarenhard/rails-cve-2017-17917

Educational demonstration of CVE-2017-17917 SQL injection in Rails, with step-by-step replication and secure coding mitigation using parameterized…

vulnerability-analysiscode-analysisweb-application-exploitation+3

12 years ago

CVE-2025-63943

redopsx/cve-2025-63943

SQL Injection vulnerability discovered in Grocery Store Management System 1.0

vulnerability-analysiscode-analysisexploitation+3

11 months ago

SealSecurityAssignment

cucumberanorsncompany/sealsecurityassignment

Researching on the vulnrability CVE-2023-26136

static-analysisvulnerability-analysiscode-analysis+3

12 years ago

PostGallery-CVE-Report

mooseloveti/postgallery-cve-report

Disclosure for CVE-2025-13543

vulnerability-analysiscode-analysisexploitation+3

10 months ago

CVE-2025-55182

klassiker/cve-2025-55182

CodeQL-based analysis of CVE-2025-55182 prototype pollution vulnerability in React Server Components, with exploit POC and static detection queries…

static-analysisvulnerability-analysiscode-analysis+3

10 months ago

CVE-2025-48384-test

beishanxueyuan/cve-2025-48384-test

Reproduction of CVE-2025-48384 demonstrating a Git submodule path traversal vulnerability, with step-by-step commands to recreate the exploit.

vulnerability-analysiscode-analysisexploitation+1

11 year ago

pyrocms-ssti-fix

ysaxon/pyrocms-ssti-fix

A drop-in fix for CVE-2023-29689 - SSTI in PyroCMS, via a custom Twig Sandbox implementation

defensive-toolsvulnerability-analysiscode-analysis+3

9 months ago

Previous 1…838485…100 Next

Code Analysis — Page 84 | Kitploit